
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YO32hlKg_a-a2-Sd_sQq4UBTzI.cer
File: 7YO32hlKg_a-a2-Sd_sQq4UBTzI.cer (raw, json)
Hash identifier: aQECUKqVdr1RUGjBhH5lV1G4/S8LAYp8b1DqAOE9qmQ=
Subject key identifier: ED:83:B7:DA:19:4A:83:F6:BE:6B:6F:92:77:FB:10:AB:85:01:4F:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C8A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91147FE/AB021E78501911F1B0625E19C2833773/7YO32hlKg_a-a2-Sd_sQq4UBTzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91147FE/AB021E78501911F1B0625E19C2833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 12:26:14 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 150412
IP: 103.191.36.0/23
IP: 2400:9420::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182436 (0x2c8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 12:26:14 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91147FE, serialNumber=ED83B7DA194A83F6BE6B6F9277FB10AB85014F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:ff:7e:1b:c6:7a:74:13:1b:15:c3:0b:b0:
e6:08:2f:4e:30:78:fd:db:44:4a:b4:17:22:8f:b8:
f4:72:b2:ad:75:83:2a:f5:43:a7:ae:da:ce:e5:51:
c9:aa:90:03:61:e8:1d:92:cb:49:75:22:14:94:28:
a8:be:36:81:94:a9:b4:0f:29:0f:3d:b6:e8:d0:2f:
e0:47:4f:a1:c9:63:d7:4e:3b:54:f9:05:a5:18:7b:
82:a0:bc:95:72:e5:a2:90:eb:52:7b:b4:28:a9:b0:
08:69:30:79:78:f1:fa:5a:27:32:28:c1:9b:28:64:
bb:b0:79:ac:5b:0f:27:08:fc:5b:07:b5:9a:5e:e0:
fc:fb:33:2a:ca:8b:a6:3e:22:e4:03:07:28:0f:55:
3b:72:82:8f:4f:92:ae:59:f2:2f:3c:f3:fa:80:48:
09:8b:a6:66:4d:94:f7:61:ef:e4:76:cd:83:c9:bf:
8d:ae:90:22:7c:93:0e:64:98:d0:65:65:98:61:b6:
bb:af:83:78:3d:a3:53:a2:a1:bb:14:26:08:ae:f5:
1d:04:ea:61:ae:9b:28:18:4b:fa:25:0c:70:ab:4f:
09:52:f2:3d:80:3e:48:dc:e0:25:43:96:5d:ed:21:
39:14:5d:e9:cd:09:85:17:79:e1:3f:19:a3:f2:49:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:B7:DA:19:4A:83:F6:BE:6B:6F:92:77:FB:10:AB:85:01:4F:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91147FE/AB021E78501911F1B0625E19C2833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91147FE/AB021E78501911F1B0625E19C2833773/7YO32hlKg_a-a2-Sd_sQq4UBTzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150412
sbgp-ipAddrBlock: critical
IPv4:
103.191.36.0/23
IPv6:
2400:9420::/32
Signature Algorithm: sha256WithRSAEncryption
74:20:c1:f3:e3:d3:11:23:21:19:ac:58:64:64:b6:46:27:36:
dd:b8:15:3f:5c:f9:39:05:66:0d:f1:74:da:5d:d9:29:9d:5c:
79:a9:ab:37:c6:ff:e9:8d:55:32:b7:10:53:86:1a:1f:53:26:
1f:65:0f:22:27:16:c3:05:ea:62:4c:c4:ca:51:61:e7:f0:c5:
db:65:da:9a:9c:a9:f1:75:57:40:19:b5:c2:bd:e7:5f:aa:82:
f0:6d:b0:0e:0e:2b:bc:32:6b:67:15:48:80:a0:32:30:44:b0:
37:6e:84:0d:30:16:db:63:d7:32:2d:e3:8c:59:70:9b:ed:48:
9e:65:11:e2:0d:84:f6:d4:02:03:13:37:6b:32:fa:a6:aa:bd:
90:dc:0a:5e:14:8d:34:bf:fb:c0:9c:06:06:5e:ae:fe:f5:d9:
ae:09:92:42:11:2b:2c:cc:a3:e3:13:c3:e1:b6:d6:ec:9a:7e:
ee:be:c9:87:44:72:c9:ed:3d:69:d4:19:8a:f7:ba:ae:6e:98:
32:03:4f:dc:9f:db:c5:51:e6:c4:0e:ad:89:75:e4:eb:54:5f:
70:46:8d:33:a6:25:c9:5c:b4:8c:0e:e8:cc:da:93:16:7e:71:
a9:25:bb:41:67:56:40:87:61:1d:dc:d2:93:da:ce:84:1e:ec:
d7:ea:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:46 2026 by rpki-client